← back
CVE-2020-27912

CVE-2020-27912

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.8%
exploitation probability
1.8%top 22% of all CVEs
observed exploitation
nono source reports it
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected products
Apple · iOS and iPadOSApple · macOSApple · tvOSApple · watchOS
References
http://seclists.org/fulldisclosure/2020/Dec/26http://seclists.org/fulldisclosure/2020/Dec/32https://support.apple.com/en-us/HT211928https://support.apple.com/en-us/HT211929https://support.apple.com/en-us/HT211930https://support.apple.com/en-us/HT211931https://support.apple.com/en-us/HT211933https://support.apple.com/en-us/HT211935https://support.apple.com/kb/HT212011